Add and configure packages

First, install an Okta SDK for your framework to help validate incoming tokens.

Include the dependency

• ASP.NET
• ASP.NET Core 2.x
• ASP.NET Core 3.x
• Go
• Node Express
• PHP
• Spring Boot

All of our Okta packages for Node are hosted on npm. Install the following dependencies in your project:

• @okta/oidc-middleware 2.0.0 or higher

You can install them using npm:

npm install --save @okta/jwt-verifier
npm install --save cors

Configure the middleware

You need to configure the Okta SDK with some information about your Okta domain. You can provide this configuration through environment variables, configuration files, or in code. Then, put the middleware provided by the SDK into your application's pipeline.

Things you need

• Okta Domain — Find it on the Developer Console dashboard in the upper-right corner as the Org URL.
• Audience — The audience of your Authorization Server. The default value is api://default.

Note: https://${yourOktaDomain} is different from your admin URL. Don't include -admin in the value.

• ASP.NET
• ASP.NET Core 2.x
• ASP.NET Core 3.x
• Go
• Node Express
• PHP
• Spring Boot

Create a verifier instance, bound to the issuer:

const OktaJwtVerifier = require('@okta/jwt-verifier');

const oktaJwtVerifier = new OktaJwtVerifier({
  issuer: 'https://${yourOktaDomain}/oauth2/default' // required
});

Next: Require authentication